Privacy Policy

This Privacy Policy is provided pursuant to Articles 13 and 14 of Regulation (EU) 2016/679 (“GDPR”) and Legislative Decree 196/2003, as amended (“Privacy Code”), to users who access the website www.tax-audit.it (hereinafter, the “Website”). This Privacy Policy applies exclusively to the Website and does not extend to other websites that may be accessed through links.

1. Data Controller

Data Controller: Dott. Massimo Vendraminelli

2. Types of Data Processed

a) Browsing data. The IT systems and software procedures used to operate the Website acquire, during their normal operation, certain personal data whose transmission is implicit in the use of Internet communication protocols (for example, IP addresses, domain names of the devices used, time of the request, response status code, and information concerning the browser and operating system). This information is not collected in order to be associated with identified data subjects but, by its very nature, could, through processing and association with data held by third parties, make it possible to identify users. Such data are used solely to ensure the proper functioning and security of the Website.

b) Data provided voluntarily by the user. The optional, explicit and voluntary sending of messages through the contact form available on the Website, or to the e-mail addresses provided, entails the subsequent acquisition of the sender’s contact details (such as name, e-mail address and, where provided, telephone number), as well as any other personal data included in the communication. Such data are processed solely for the purpose of responding to the requests received and are not used for any other purposes.

3. Purposes and Legal Basis of Processing

  • To enable navigation, ensure the proper functioning of the Website and maintain its security – legal basis: the legitimate interest of the Data Controller (Article 6(1)(f) GDPR).
  • To respond to requests submitted through the contact form or other contact details provided – legal basis: the performance of pre-contractual measures taken at the request of the data subject (Article 6(1)(b) GDPR).
  • To comply with any legal obligations or requests from judicial authorities – legal basis: compliance with a legal obligation (Article 6(1)(c) GDPR).

Personal data collected through the Website are not used for marketing purposes, are not subject to profiling or automated decision-making processes, and are not disclosed to the public.

4. Provision of Data

Except for browsing data, whose acquisition is implicit in the use of the Website, the provision of data through the contact form is free and optional. Failure to provide such data will only make it impossible to respond to the request.

5. Processing Methods and Data Retention Period

Personal data are processed using IT and electronic means, according to procedures strictly related to the purposes indicated above and by adopting appropriate security measures to prevent data loss, unlawful or incorrect use, and unauthorised access.

Browsing data are retained for the time strictly necessary for the operation and security of the Website. Data provided through the contact form are retained for the time necessary to respond to the request and, thereafter, for any period necessary to protect the rights of the Data Controller or comply with legal obligations.

6. Data Recipients

Personal data may be processed by persons expressly authorised by the Data Controller and by technical service providers (such as the Website hosting provider), acting as data processors pursuant to Article 28 GDPR. Data may also be disclosed to public authorities where required by law. Personal data are not transferred outside the European Union.

7. Data Subject Rights

Pursuant to Articles 15 et seq. of the GDPR, data subjects have the right to obtain from the Data Controller:

  • access to their personal data and information relating to the processing thereof (Article 15);
  • rectification of inaccurate data or completion of incomplete data (Article 16);
  • erasure of personal data, where applicable (Article 17);
  • restriction of processing, where applicable (Article 18);
  • data portability (Article 20);
  • to object to processing based on the legitimate interest of the Data Controller (Article 21).

Requests may be addressed to the Data Controller using the contact details indicated in Section 1. Data subjects also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali) pursuant to Article 77 GDPR – www.garanteprivacy.it – or to bring proceedings before the competent courts.

8. Cookies

The Website uses exclusively technical cookies. For further information, please refer to the Cookie Policy published on the Website.

9. Amendments to this Privacy Policy

The Data Controller reserves the right to amend or update this Privacy Policy at any time. Users are invited to consult this page periodically.

Last updated: July 2026.

Scroll to Top